Whats are the benefits of having MPLS- Velo cloud? We are a company with many branch offices and located in diffrent place and all of them are on diffrent domain. None of them are integrated yet. No VPN too. How MPLS will help us in integrating the company to one and how VPN an be setup so that users can work remotely and IT support can troubleshoot issues remotely not have to visit sites physically? Please suggest me. I want to see one domain under one umbrella.

Hello Cisco Experts,

I am learning how to setup the site to site VPN between two locations but it's NOT working for some reason (it's failed when I pinged the 172.16.1.1 from 172.16.2.X network .... I also tried to hit a web server (172.16.1.xx at port 80) and no luck ... it seems some sort of settings is missing?  I configured the site to site VPN with the ASDM wizard and it didn't give me any error message.  So I hope someone can shed some lights here for me?  Thanks in advance.

Following is configuration for ASA5505

sh run
: Saved
:
: Serial Number: xxxxxxxxxxxxx
: Hardware:   ASA5505, 1024 MB RAM, CPU Geode 500 MHz
:
ASA Version 9.2(4)
!
hostname 325RC-CASA5505
domain-name xxxxxxxxxxxxxx.com
enable password Yxxxxxxxxxxxxe encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd 2xxxxxxxxxxxxxxxxxxxU encrypted
names
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
 shutdown
!
interface Ethernet0/4
 shutdown
!
interface Ethernet0/5
 shutdown
!
interface Ethernet0/6
 shutdown
!
interface Ethernet0/7
 shutdown
!
interface Vlan1
 nameif inside
 security-level …

Hello,

I have Checkpoint Firewall, trying to route traffic for a remote user to the office then to another subnet in a different location to access RDP. Static routing is on the FW to this subnet, a policy is also set for that user to access that network and the subnet is in the Encryption domain.
In the office the access is accessible over MPLS. Can the traffic be routed to the FW over the Internet and forwarded over the MPLS link.

Thanks in Advance

So if my understanding is correct from what I have managed to discover, the problem here is that any device connected to a cell phone hotspot, that has an active VPN, will simply route through the public ip connection on the hotspot and not go through the VPN.

Is there a way to 'route' through the VPN any device connected to the cell hotspot?  I have heard that possibly rooting the cell phone may allow this, but I have never rooted a phone before.

Or, is there another way to make this happen?  I am trying to create a secure VPN from our remote offices back to our main office using a cell phone...without having to step up to a LTE router.

Odd one. We installed a Meraki MX 84 firewall in our office. We have successfully connected via VPN from at least 5 different remote locations. However, my Windows 10 machine WILL NOT connect.  We have connected a couple different Win10,Win7,Ipads, Mac books just fine. My windows 10, using exact same set up as other Win 10 machine fails to connect, giving error of "L2TP Connection attempt failed because the security layer encountered a processing error during inial  negotiations"

I started a case with Cisco, who had me do a packet capture. They confirmed that my PC was sending packets to Meraki. We checked IKE and AuthIP IPsec Keying service was set for "automatic" and running.  It was...

We added correct registry key for "AssumeUDPEncapsulationContextOnSendRule." Done...no luck

At this point, CISCO suggested I call ISP to see that my cable modem was set to enable VPN Passthrough. It is....

I then successfully added my Android tablet to connect VPN via the same wireless router/ ISP connection from my home.  that worked fine.

Set my Windows 10 box to use 8.8.8.8. DNS...still no luck

Not sure what else to check

We are using Layer 2 Tunneling Protocol with iPsec(L2TP/IPsec)

Require Encryption (disconnect if server declines)
Encryped Password (PAP)
Using a preshared key.

These setting have worked seamlessly with all others EXCEPT MINE !
Verified username and password. Verified Preshared Key.

Any suggestions ?

Dear experts

My situation is quite complicated.
Generally, I m creating an VPN server.
For different client connect to the VPN Server from different country, I would like to provide different dhcp-range.

I understand that dnsmasq support multiple network.
My question is how I can use the tag indicator and the client will collect the correct dhcp-range in the VPN connection situation.

e.g.
------------------------------------------
# Address range for country1 clients
dhcp-range=tag:country1,192.168.1.10,192.168.1.19,255.255. 255.0,1h

# Address range for country2 clients
dhcp-range=tag:country2,192.168.1.20,192.168.1.29,255.2 55.255.0,1h

# DHCP options given to known clients

# Subnet mask
dhcp-option=1,255.255.255.0
# Default gateway
dhcp-option=3,192.168.1.1
# DNS server
dhcp-option=6,192.168.1.3
# Broadcast address
dhcp-option=28,192.168.1.255
------------------------------------------

Hello,
I have a server that is running SBS 2011 and MS Exchange 2010.
We had a power outage, and when the server came back, email didn't.
Yesterday we were able to send email, but not receive.
Today we can't do either.

This system is old, and we are in the process of upgrading to a new server and OS/Exchange - hopefully in the next few weeks - but we need our email up and running today!!

I am currently logged in remotely, via LogMeIn (because the VPN was also reset as a result of the outage - router issues).
When I open the Exchange console, and try to connect to the Exchange server, I get an error - The attempt to connect using Kerberos authentication failed: the client cannot connect to the destination specified in the request. Verify that the service on the destination is running and i accepting requests.

Any suggestions would be greatly appreciated!!

Amber

How can I completely hide my current location, using a VPN, for the website owner when I am logged into this website?

Or will there always be a way for the website owner to find out my current location, even when using a VPN, for example if they use a script?

Hi, just wanted to ask a bit of advice about changing IP addresses of a Server 2011 SBS network.  To cut a long story short I have to create some VPN connections between 2 networks that are on the same subnet and I need to change one network to be on a different subnet.

Both networks are on 192.168.101.x

2 questions really, if I change the second network to 192.168.102.x will that be enough to stop any VPN issues?

Secondly, the network I'm going to change consists of a Watchguard Firewall, Windows 2011 SBS Server and a network printer.  I have local physical access to the Firewall and Printer but not the server.  I'd just like a bit of advice on what device IP I should change first as I don't want to end up losing connection (will be doing this all over a remote connection).

Many thanks

Adam

Similar to other posts we have to run Virtual Machines to accommodate Checkpoint VPN client just because all traffic passes through. We RDP to client jump boxes once connected. Forcibly setting route all to false doesn't change the outcome. Strangely, if we use the windows store checkpoint and win 10 Vpn it's ok. This is only with the client install, but the win store Vpn drops frequently and not desirable. Any help appreciated, doubtful client will change settings as we are 1 of many connecting.

Knowing public access to our Internal CA is a HUGE security risk, is there a way to perform this in a more secure manor?

Is the best practice to up a known public CA?

We are in the process of setting up RAS for remote vpn